Updated x11-server packages fix CVE-2013-4396

2013-10-2601:07:07

Gentoo Foundation

advisories.mageia.org

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.029 Low

EPSS

Percentile

90.7%

JSON

Updated x11-server packages fix security vulnerability: Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted ImageText request that triggers memory-allocation failure (CVE-2013-4396).

OSVersionArchitecturePackageVersionFilename
Mageia2noarchx11-server< 1.11.4-2.4x11-server-1.11.4-2.4.mga2
Mageia3noarchx11-server< 1.13.4-2.2x11-server-1.13.4-2.2.mga3